I see where you can do radius authentication on the global protect client, does that mean you can also do 2 factor authentication?
i had a migration from asa to pan which failedcurent conectivity isasa (no change)<>switch (no change)<>asa (to be replaced)planned connectivity isasa (no change)<>switch (no change)<>pan (replacing asa) i reused ips from asa on new pan and cleared arp on no change asa but tcp sessions failed due to incomplete/aging out. ...
There is such kind of error when one try to connect to portalhow it can be resolved?
Our active HA member failed last week, and that highlighted that the passive had a couple of minor issues with the Dynamic update configurationa and email configuration which we fixed. Howevr it's also highlighted another issue. Our "Content Updates" are set to update directly out of the firewall external interfaces, yet on the now "Passive" uni...
We are trying to get 2FA RADIUS based authentication working with our Palo's and are seeing unreliable results. After much hunting and teeth gnashing we think we may have found the issue, but not the cause. The below is a debug dump from the RADIUS server (RSA AccessID) using Panorama GUI logon as the test case. The first shows a good 2FA auth...
Hello, I'm using Minemeld 0.9.44 and I would to get 'range' from the URL https://ips.zscaler.net/cenr/json. After several attempts with JSON prototype, trying to set different extractor, field (indicator set as range). I'm still not able to get any information. Could you please let me know what is the best what to extract 'range'? Thank...
So there will be a range of ports that need to be NATTED, but on the GUI, I can only specify a single port.Can anyone tell me if this will work if I leave the port empty like below: set service-group "Veeam Management" members [ "Veeam 2500-2600" "Veeam 9292-9293" ] set rulebase nat rules "NAT Veeam Backup Server" to outsideset rulebase nat rule...
I'm trying to build a global rule for Sophos cloud based services. I've built a list of all the URLs they use, added the URL list to the URL category part of the rule with the applications web-browsing, ssl, sophos-update and sophos-live-protection, and generally it seemed to work with a small snag. I noticed a LOT of traffic was hitting this ru...
Ok, let just star by saying I am new to Panorama and I think understand the concept but just doesn’t work as expected. So I will just explain the end goal, I currently have an active/passive pa-500 pair that I am switching to two 3220 in an ha pair. Panorama is just planning for the future if I roll out 25 more devices to my remote offices.Since...
Global Protect VPN Solution is defined with Pre-login and always-on VPN features. Workflow:Once machine is booted and before user login, Machine is authenticated based on certificate and identified in logs with (Pre-login) userPre-login access is restricted to Mac Management solution and AD.Once user is logged in, a new tunnel is initiated and ...
When Creating a Custom URL Category, I am entering a wildcard infront of the url *lans.com.au However when attempting to apply this wildcard, I am getting this error URLBlock -> list '*lans.com.au' is invalid. Consecutive asterisks (*) in a URL wildcard pattern can severely impact performance and is not supported. Instead, use a single asteri...
Hello,Is there way to export a policy from a PAN device in a read-able format? We are in the process of cutting over a new PAN internet firewall and all the rules had to be created by hand (from the previous vendor model). I'm looking for the ability to take what shows in the webui policy and print it out so that we can more easily review the ru...
Dear All I'm facing one issue relate to VPN between PA and WG.I am using 3DES/SHA1/PFS2, it is not working till i disable PFS-2 on Phase-2.2018-05-10 10:44:10.483 +0700 [DEBG]: { : 40}: keyacquire received: x.x.x.x[0] => y.y.y.y[0]2018-05-10 10:44:10.483 +0700 [DEBG]: { 14: 40}: processing acquire for IKEv12018-05-10 10:44:10.483 +0700 [PNTF]...
hi, can basic functionality of a firewall be used without a license on a hardware firewall?
What recommended value for Server Log Monitor Frequency if we increase the from 2 Sec to 10 Sec ? What is the relation between this queries and User Identification Timeout of 600 minutes and Server Log Monitor Freq?
reaper
on:
PA 3410 latest Version
BPry
on:
Issues with connectivity between HA PAs and Nexus Leaf Switches
